https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2019-16536.htmlhttps://patchthecve.com/cve/CVE-2019-16536.htmlWed, 17 Jun 2026 02:22:23 +0000HIGH 8.8: Stack overflow leading to DoS can be triggered by a malicious authenticated client in Clickhouse before 19.14.3.3.https://patchthecve.com/cve/CVE-2025-1386.htmlhttps://patchthecve.com/cve/CVE-2025-1386.htmlWed, 17 Jun 2026 08:39:02 +0000MEDIUM 4.9: When using the ch-go library, under a specific condition when the query includes a large, uncompressed malicious external data, it is possible for an attacker in control of such data to smuggle another query packet into the connection stream.https://patchthecve.com/cve/CVE-2024-41436.htmlhttps://patchthecve.com/cve/CVE-2024-41436.htmlWed, 17 Jun 2026 07:47:42 +0000HIGH 7.5: ClickHouse v24.3.3.102 was discovered to contain a buffer overflow via the component DB::evaluateConstantExpressionImpl.https://patchthecve.com/cve/CVE-2024-22412.htmlhttps://patchthecve.com/cve/CVE-2024-22412.htmlWed, 17 Jun 2026 07:11:21 +0000LOW 2.4: ClickHouse is an open-source column-oriented database management system. A bug exists in the cloud ClickHouse offering prior to version 24.0.2.54535 and in github.com/clickhouse/clickhouse version 23.1. Query caching bypasses the role based access controls and the policies being enforced on roles. Ihttps://patchthecve.com/cve/CVE-2024-23689.htmlhttps://patchthecve.com/cve/CVE-2024-23689.htmlTue, 14 Jul 2026 23:17:17 +0000HIGH 8.8: Exposure of sensitive information in exceptions in ClichHouse's clickhouse-r2dbc, com.clickhouse:clickhouse-jdbc, and com.clickhouse:clickhouse-client versions less than 0.4.6 allows unauthorized users to gain access to client certificate passwords via client exception logs. This occurs when 'sslkey